added shift-left analysis

tomtau · Jul 13, 2020 · 577bead · 577bead
1 parent 7532147
commit 577bead
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/workflows/chain-docs.yml b/.github/workflows/chain-docs.yml
@@ -34,3 +34,19 @@ jobs:
         . ci/scripts/prepare
         ci/scripts/build
         ci/scripts/deploy
+    - name: Perform ShiftLeft Scan
+      uses: ShiftLeftSecurity/scan-action@master
+      env:
+        WORKSPACE: ""
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        SCAN_AUTO_BUILD: true
+      with:
+        output: reports
+        # Scan auto-detects the languages in your project. To override uncomment the below variable and set the type
+        # type: credscan,java
+        # type: python
+
+    - name: Upload report
+      uses: github/codeql-action/upload-sarif@v1
+      with:
+        sarif_file: reports